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Depart?nmrttof 

WassfeinjgttonPG 2Q5&5 


July 19, 


MEMORANDUM INXR 


FROM; 


SUBJECT; 



Inspector General 

SUMMARY : Special InqniiiiylfiBSpHttlftdfetii^ 
Energy’s Response to a Comproromise of H^monn«ll 
M™) 


During a June 9*2006, congiesswwaill ttrearringj.IBfeparttne®tiicxffEBargyy)fifiifiialslpphHtitydidoloke&d 
that a hacker fail attacMe&lan unclassified ©Magfasar sjjss amlat ttlotecNattKmsli Nuq Idea SWnity 
Administrationa's (NNSA) SeireicffiCtoten'ihiA^blu^cqqB^N^WNNMeide^wcliiiMidxfilttktatQtLd a 




NNSA. Atthetewii^,\wtn{@s§3st$8titfiiddhhUt(l) seniorOepantmenttafficaal^jhd-ikMtrogyy'ouu 



the Depaarttrameimti ini aompitetingan assessment offcimpaeltafithttdiDitmiakmaihQlUdihgghtiic 
compromise of paisonnei ldiMa . WednterMmwflli4(S eminent and former Federal andl oontmaiorr 
employees of tite DeparttmenttandlatHenagsnKriess. Thbdriqqiiytetmiu analysed: thdusaudschf'of 
classified and MBdla88iffedld<kouiiiniBOte,siriahidiiiggep<pKT)£):s;let£rOniaimessag^spnotBaandiTdlat4ai 
records. We ©CTMnnteri^lc©rt3«wQonBMt^tir8mhfcki»kra^ 
could not be irecanmihdl. 




separate cawt. 


SUMMARY 


Secrettairy (DmttespBmftixxMtaiild^fldtbiccmppliefcatSibfckrttiltJUhieifiOMttfAddiiiljHalilyJlwewe 


SnnnTnT^iijjiilj iln^U»4^l|RTT^i| »i'i> ii ik HnTiUlifif.IVvrtT’iir 1 




was at 


PMted wiWisoy irtkon imypM^afwr 
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determined that 
assessment on the itatosiftRi. 

Additionally, the 

and Counterm1iefi^m,l^TQfl^^i3legprtMPd^gititltfe01R^aM?Srini¥Wf^]M5^O@§05, 
informed us th&ttie^WftneSta^d4leddc^ltte^pp©iifiS:^6fch^^SQ®eproififsWlMWtft^O^06. 
It waKourjudgroefflftift^ttlifsfeihdd[w#0Ms^¥e0rthhffiddtia^iiiad(Je^j^4Mtj®ftfe§hiduldlte«ve 
been directly enpi§©il initfti&ifesufeas early in the as posable-. 


Witnesses provikMtMhT^te00Meffeitte®atil!jtm^tennilW$i0^SererHhteeweFe¥v«^>0©k4teded 
that the DepartmeBtfs handling affthi ssmatten was largely dlysfeiittmonalland that the operational! 
anflprocedural lareaMbvw$s\wecca^ed^bly\q^estiDnahldmma@eina3ijlu(lginentat«ighificlanJint 


confusii(Diinl%lk^'d!hoi$»b(miiffiakkE3-«s to lines of autttori%,,nespnnsattllty,',affl(tlaflcomtehHitr^'ppor)r 
internal conraumik^bnH, jhdUdJh^J4akl<o(ffcoordihatitiiJ land d Mlsiheitotshahraiessentiaili al 


decisions. 

notifying employees wtan personnel ldiliaiiis scomppomiHedd .TKfefeifiiraaated drg^aatktnaih al 
structure of INflNKA within die Department fmiittlta'ra . 


or 


During an interview with the Office: of flispBottoiCfamcaliJ Mnbhssaddn Llxitdi® iBfiioldi thdie 
NNSA Administrator;, statMlttialtHeettokkfiill respomiMillly' fer'noltemurihgitlilatiypuLEndtthbe 
Deputy Secretary w«^ful%M^^amtHffienia»Eiyehi«antitddihharilirtisiskinIirBddititinphfee 
stated that he was thesaniaroidcaailresppnBibWcfdbnotifdbtiwingwipipotensiamithfihtihehe 


In addition to Ambassadbn'HkioJ^^vredciiniiiifiediieveniothtesejiriroirjofflitialalwMishahadcshHimie 
level of respotBsaMIfy' ffintheewayvimrTwhhihlthh cmatteEWBSihdnrfidli:d. 


RECOMMENDATTl 


msaa 


The Department anodl,imp«rti©ad^ J50O(<fcmpldyees:whdraespqrs®jm®hdata may have 

been compromised were: nattwdl lssnreddblyy hbraatitins » fib ffifiiala 1 mi oarnyriigi^iit) ithehcdudefci e s 
during these ewentts. Bhfiodloo«xxOTireiyveiwy,vw(conoMdeld(dliuitlhdiD6hqirtme^i$h6WdiMkelthehe 
following sttepB, to)pffidiidterecuinrennecDfifhiB »r)Biihiliik«iniiatii(Jhsi s: 


1. Ensure that the IGtepaitmenttHMsaciiaiy'unambi^ousipipliiiy pn)notifyl'ngi^nqBli<[fye|!ses 


s; 


2. Redefinaarid' & arifyrrdfesaantiire^pi 

officials, cyber/liimffoimariQnittohn<DlKbgyvpiet£annehls©c^ 


ensure that the Seenetariy'aiidlllipjt^^ on cyber 

intrusions, seomiity ihddkitSsandlsaniMliir lnrattdcr® fi kiggifitanee: tot© ^ipaiflea&fillta 1 
operations; 


3. 

4. 


er 
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5. Appoint a task force of senior Departmental officials, including NNSAv to address 
situational implications resulting from the bifurcation of Department and NNSA 
ani^ 

& Review the facts in the Special Inquiry report and determine if personnel action is 
warranted. 

I would be pleased to discuss this report in detail at your convenience. 




